Zero-trust remote admin access for Windows VMs on Compute Engine